User Management

// From user.php model (system/library/cart/user.php)
namespace Opencart\System\Library\Cart;

class User {
    protected int $user_id = 0;
    protected string $username = '';
    protected int $user_group_id = 0;
    protected array $permission = [];
    
    public function login(string $username, string $password): bool {
        $user_query = $this->db->query(
            "SELECT * FROM `" . DB_PREFIX . "user` 
            WHERE LCASE(`username`) = '" . $this->db->escape(oc_strtolower($username)) . "' 
            AND `status` = '1'"
        );
        
        if ($user_query->num_rows && password_verify($password, $user_query->row['password'])) {
            $this->user_id = $user_query->row['user_id'];
            $this->username = $user_query->row['username'];
            $this->user_group_id = $user_query->row['user_group_id'];
            return true;
        }
        
        return false;
    }
}

// From user_permission.php model
namespace Opencart\Admin\Model\User;

class UserGroup extends \Opencart\System\Engine\Model {
    public function addUserGroup(array $data): int {
        $this->db->query(
            "INSERT INTO `" . DB_PREFIX . "user_group` 
            SET `name` = '" . $this->db->escape($data['name']) . "', 
            `permission` = '" . $this->db->escape(isset($data['permission']) ? json_encode($data['permission']) : '') . "'"
        );
        
        return $this->db->getLastId();
    }
}

// From api.php controller
namespace Opencart\Admin\Controller\User;

class Api extends \Opencart\System\Engine\Controller {
    public function index(): void {
        $this->load->model('user/api');
        
        // API users with session tokens
        $results = $this->model_user_api->getApis();
    }
}

// API authentication example
$api_key = 'your-api-key-here';
$store_url = 'https://yourstore.com';

// Step 1: Create session
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $store_url . '/index.php?route=api/login');
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query([
    'key' => $api_key
]));

$response = curl_exec($ch);
$data = json_decode($response, true);
$api_token = $data['api_token'];

// Step 2: Use token for requests
curl_setopt($ch, CURLOPT_URL, $store_url . '/index.php?route=api/cart/add&api_token=' . $api_token);
curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query([
    'product_id' => 42,
    'quantity' => 1
]));

$result = curl_exec($ch);
curl_close($ch);

// From profile.php controller
namespace Opencart\Admin\Controller\User;

class Profile extends \Opencart\System\Engine\Controller {
    public function edit(): void {
        $this->load->model('user/user');
        
        // Users can update their own details
        $user_info = $this->model_user_user->getUser($this->user->getId());
        
        // Can modify: firstname, lastname, email, image, password
        // Cannot modify: username, user_group_id (requires admin)
    }
}